
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24c27dc9-d67e-3f5b-a2e0-2e2aeb48e2a5.roa
File: 24c27dc9-d67e-3f5b-a2e0-2e2aeb48e2a5.roa (raw, json)
Hash identifier: p5qyfBSy4zUGLwzQIAsvJVl29pyGQ+PGdHuVoONryG4=
Subject key identifier: A8:03:6F:D3:16:0F:17:17:86:F9:CE:DE:25:36:F3:70:14:0A:82:75
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F7A4EE7984F3D8FA8C0F17680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24c27dc9-d67e-3f5b-a2e0-2e2aeb48e2a5.roa
Signing time: Mon 12 Oct 2026 13:00:12 +0000
ROA not before: Mon 12 Oct 2026 13:00:12 +0000
ROA not after: Sun 10 Jan 2027 14:00:12 +0000
asID: 33490
IP address blocks: 71.63.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 24 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7a:4e:e7:98:4f:3d:8f:a8:c0:f1:76:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Oct 12 13:00:12 2026 GMT
Not After : Jan 10 14:00:12 2027 GMT
Subject: CN=44a62cde-6cde-4598-9116-bc11e278c1f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4b:1f:13:62:07:a9:d1:d3:de:8a:fe:60:e8:
d6:96:b2:5f:a8:d6:63:d8:b8:b0:ff:da:f4:b3:18:
af:de:9b:17:35:d8:2c:c0:0f:02:80:2a:f8:7d:56:
ad:e2:67:20:51:d2:96:aa:21:b8:fb:f0:36:82:73:
91:6c:b2:b2:4d:c3:0b:06:dd:19:6c:11:84:e5:2a:
c6:f8:e1:f8:47:f2:a0:86:b8:b2:84:d7:1c:b4:48:
f8:84:b1:df:c2:05:4c:2b:47:89:f7:37:db:43:20:
94:f1:95:80:f6:fa:a5:e9:0e:8a:40:05:02:7b:ee:
cf:bf:41:46:a1:ae:de:b1:7a:59:2f:17:7a:9c:f4:
c8:57:2f:6f:20:c1:d5:2f:7c:83:89:b2:8c:ca:af:
ce:23:ed:d5:37:0a:90:dd:73:52:6f:8a:23:b0:f9:
06:b6:bd:6c:cf:c9:d9:25:5c:af:5d:2c:88:c9:a8:
fa:2c:27:b4:83:3f:20:c7:5e:d0:08:c3:9c:93:0a:
62:99:eb:89:06:4e:51:d8:7d:9f:75:1c:82:0d:1c:
a6:a8:ac:8b:a0:bb:c0:6d:12:0a:4c:ce:e8:ab:b0:
00:f7:b1:d7:c1:d3:1d:4a:24:e5:49:01:3b:52:b8:
f5:7e:c1:09:52:ff:76:d6:e2:d3:e8:3e:5e:6e:57:
a6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:03:6F:D3:16:0F:17:17:86:F9:CE:DE:25:36:F3:70:14:0A:82:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24c27dc9-d67e-3f5b-a2e0-2e2aeb48e2a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.63.203.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:fb:a9:8e:ba:29:b5:a6:24:a1:2c:42:cf:d2:1b:0d:3f:7c:
ac:93:ea:cb:23:d6:95:9e:d2:c1:60:ed:65:db:09:77:15:b8:
32:22:94:02:13:d0:c9:69:0b:29:78:3e:53:62:53:83:8b:a6:
ed:af:21:18:43:d9:64:11:a1:fc:65:25:4b:6c:42:60:a2:7c:
2d:fe:52:c8:6c:cd:d2:c0:ac:da:b2:61:ce:fb:6f:e9:e2:f4:
8d:c8:2d:fb:6a:c2:f6:6d:ed:f3:cc:51:bb:ca:3a:ab:5e:3a:
00:a0:ef:86:54:36:29:15:b5:24:39:d0:e8:cb:18:dd:b0:24:
9b:07:5d:42:eb:71:fd:b3:0f:0d:f4:9b:ed:d2:6e:eb:f7:27:
ca:cd:f0:18:dc:41:e7:28:ec:60:6b:03:2f:26:62:fb:b3:f0:
4b:a0:c1:18:ac:83:ec:24:2d:ab:62:aa:95:6d:0d:a9:71:27:
21:27:49:61:a7:b3:4e:15:49:59:68:b3:83:55:91:4b:89:aa:
4a:e6:e4:3f:c5:da:a8:22:0b:1a:a6:48:90:ac:0f:f8:b8:7a:
67:81:f6:94:46:fd:31:cf:f0:79:c9:6d:78:72:a9:0d:86:70:
3d:2a:34:40:0c:7e:e6:8a:a8:b6:74:9e:b5:28:ea:de:86:39:
7a:39:d9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 16:42:45 2026 by rpki-client